Code

MFA v1 - TOTP#2830

Code

Draft

yash-learner wants to merge 31 commits intoohcnetwork:developohcnetwork/care:developfrom yash-learner:issues/2614/mfayash-learner/care:issues/2614/mfaCopy head branch name to clipboard

+629-91

Commits

Commits on Feb 10, 2025

• Add pyotp dependency to Pipfile

  yash-learner

  committed
  74907af

  Copy full SHA for 74907af

• Add TOTP secret and MFA settings to User model

  yash-learner

  committed
  5c3964e

  Copy full SHA for 5c3964e

• Add make migratons

  yash-learner

  committed
  f560363

  Copy full SHA for f560363

• Add TOTP setup and verification endpoints for MFA

  yash-learner

  committed
  173b4d3

  Copy full SHA for 173b4d3

• Register TOTPViewSet in API router

  yash-learner

  committed
  0f25d2d

  Copy full SHA for 0f25d2d

Commits on Feb 11, 2025

• Refactor TOTPViewSet to use Pydantic models

  yash-learner

  committed
  023b721

  Copy full SHA for 023b721

• fix and improve logic

  yash-learner

  committed
  418eaf7

  Copy full SHA for 418eaf7

• Add backup code generation

  yash-learner

  committed
  8efcd17

  Copy full SHA for 8efcd17

• Change TOTP secret field type from CharField to TextField in user model migration

  yash-learner

  committed
  2527506

  Copy full SHA for 2527506

• Implement TOTP secret encryption and decryption; update user model to store encrypted secrets

  yash-learner

  committed
  ca0e9dc

  Copy full SHA for ca0e9dc

• Update TOTP route to use 'mfa/totp' for improved clarity

  yash-learner

  committed
  e7a24ae

  Copy full SHA for e7a24ae

• WIP: integrate MFA into login flow

  yash-learner

  committed
  901ba9d

  Copy full SHA for 901ba9d

• WIP: integrate MFA into login flow

  yash-learner

  committed
  ea3d27d

  Copy full SHA for ea3d27d

Commits on Feb 12, 2025

• simply flow

  yash-learner

  committed
  622fa57

  Copy full SHA for 622fa57

• Refactor TOTP login method and clean up MFA token handling

  yash-learner

  committed
  5eef7d7

  Copy full SHA for 5eef7d7

Commits on Feb 13, 2025

• Add email notification for TOTP activation

  yash-learner

  committed
  d5aeab4

  Copy full SHA for d5aeab4

• Add TOTP disable functionality and refactor login request handling

  yash-learner

  committed
  d45a732

  Copy full SHA for d45a732

Commits on Feb 14, 2025

• Refactor TOTP setup and error handling; add regenerate backup codes functionality

  yash-learner

  committed
  fac7eef

  Copy full SHA for fac7eef

Commits on Feb 16, 2025

• Add endpoint backup_login and wip:refactor

  yash-learner

  committed
  edcc411

  Copy full SHA for edcc411

Commits on Feb 17, 2025

• Add mailer for TOTP disable and tiny fixes

  yash-learner

  committed
  f46573c

  Copy full SHA for f46573c

Commits on Feb 18, 2025

• WIP: Fixing review comments and playing with rate limit

  yash-learner

  committed
  c027542

  Copy full SHA for c027542

Commits on Feb 19, 2025

• Fix review comments

  Show description for ce9f6f8
  yash-learner

  committed
  ce9f6f8

  Copy full SHA for ce9f6f8

• Remove success message from TOTP enable response

  yash-learner

  committed
  ccddf0c

  Copy full SHA for ccddf0c

Commits on Feb 20, 2025

• Refactor:

  Show description for 8bd3442
  yash-learner

  committed
  8bd3442

  Copy full SHA for 8bd3442

• Create a unified MFA endpoint and cleanup separate endpoints

  yash-learner

  committed
  3eeb85a

  Copy full SHA for 3eeb85a

• Tiny clean up

  yash-learner

  committed
  22d2d79

  Copy full SHA for 22d2d79

• Add MFALoginResponse model for unified MFA login endpoint

  yash-learner

  committed
  7754731

  Copy full SHA for 7754731

• Add password requirement when using setup and regenerate backup codes

  yash-learner

  committed
  ff6a286

  Copy full SHA for ff6a286

• Merge branch 'develop' into issues/2614/mfa

  yash-learner

  committed
  e9417f3

  Copy full SHA for e9417f3

• Remove TOTP_SECRET_ENCRYPTION_KEY from environment configuration files

  yash-learner

  committed
  477096f

  Copy full SHA for 477096f

• Remove unnecessary comment from MFA login viewset

  yash-learner

  committed
  280f7d3

  Copy full SHA for 280f7d3